Commit 66100e22 authored by louib's avatar louib
Browse files

nixos/virtualisation: allow configuring openssh root login on GCE 

This commit makes the OpenSSH option `PermitRootLogin` available to be
configured by other NixOS modules when using the Google Cloud Engine
(GCE) NixOS image builder. Other options like `PasswordAuthentication`
were already configurable, so I think it makes sense to make `PermitRootLogin`
configurable as well is order to disable it completely, for example.
parent 982a9bcc

nixos/modules/virtualisation/google-compute-config.nix

+1 −1
Original line number Diff line number Diff line
@@ -39,7 +39,7 @@ in 
  # Allow root logins only using SSH keys

  # and disable password authentication in general

  services.openssh.enable = true;

  services.openssh.settings.PermitRootLogin = "prohibit-password";

  services.openssh.settings.PermitRootLogin = mkDefault "prohibit-password";

  services.openssh.settings.PasswordAuthentication = mkDefault false;



  # enable OS Login. This also requires setting enable-oslogin=TRUE metadata on